Multi value rangeDefines a list of {operation, value} pairs used
to match the source port of a TCP or UDP
packet. Values are encoded as 1- or 2-byte
quantities.
Encoding: <type (1 octet), [op, value]+>
Syntax:
match source-port {source-port-value
|[min-value - max-value]}
IPv4 Source portType 6
Single valueDefines a list of {operation, value} pairs used
to match the type field of an ICMP packet.
Values are encoded using a single byte. The
ICMP type and code specifiers evaluate to
FALSE whenever the protocol value is not
ICMP.
Encoding: <type (1 octet), [op, value]+>
Syntax:
match{ipv4}icmp-type {value |min-value
-max-value}
IPv4 ICMP typeType 7
Single valueDefines a list of {operation, value} pairs used
to match the code field of an ICMP packet.
Values are encoded using a single byte.
Encoding: <type (1 octet), [op, value]+>
Syntax:
match {ipv4}icmp-code {value |min-value
-max-value}
IPv4 ICMP codeType 8
Bit maskBitmask values can be encoded as a 1- or
2-byte bitmask. When a single byte is
specified, it matches byte 13 of the TCP
header, which contains bits 8 through 15 of
the 4th 32-bit word. When a 2-byte encoding
is used, it matches bytes 12 and 13 of the TCP
header with the data offset field having a
"don't care" value. As with port specifier, this
component evaluates to FALSE for packets
that are not TCP packets. This type uses the
bitmask operand format, which differs from
the numeric operator format in the lower
nibble.
Encoding: <type (1 octet), [op, bitmask]+>
Syntax:
match tcp-flag value bit-mask mask_value
IPv4 TCP flags (2
bytes include
reserved bits)
Reserved
and NS bit
not
supported
Note
Type 9
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.3.x
208
Implementing BGP Flowspec
Information About Implementing BGP Flowspec
To Next Page
Loading...
Need help?
General
